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@ A system for permitting access toe data field area in an IC 
card for multiple services using an individual card holder 
identification number for each of a plurality of data fields (61 . 62. 
63] or for each group of data fields. Data field identification 
information (11), a personal identification number (12). access 
qualification information (13). and an authentication code (14) 
are supplied to the IC card before an execution of an access to 
the data field. An authentication is made (in 32. 33) between the 
personal identification number and the authentication code 
stored in Identification number and the. authentication code 
supplied to the IC card. Based on the result of authentication, 
an access to the data field area (61, 62 or 63) to which access is 
requested is permitted within the limit of the access right stored 
in the IC card (memories 51. 52, 53) corresrxinding to me 
access qualification Information supplied to the IC card. 
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Description 

SYSTEM FOR PERMITTING ACCESS TO DATA FIELD AREA IN IC CARP FOR MULTIPLE SERVICES 



BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present Invention relates to a system for 
permitting access to a data field area in an integrated 
circuit card (IC card) for multiple services. 
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2. Description of the Related Art 

In general, in the use of an IC card tor multiple 
services, a card issuer, a service supplier, . a card 
acceptor, and a card holder are involved. An IC card 
has a plurality of data fields tor the multiple services. IS 
and for each of the data fields, the access right, 
access qualification, of card issuer, service supplier, 
card acceptor, and card holder should be predeter- 
mined. Namely, although a person has access right 
to a predetermined data field of an IC card, that 20 
person should not be authorized to have access to a 
data field of the IC card other than the predeter- 



rt is desired that access is permitted only within 
the limit of the access right to a redetermined data 25 
field of a card holder, and access outside such 
limitation is not permitted, so that the data fields 
cannot be used in an unauthorized manner. 

In the prior art, only a personal identification 
number (PIN) and an authentication code (AC code) 30 
tor the whole of an IC card are provided for an IC 
card for multiple services, and therefore, once a 
coincident result Is obtained as the result of an 
authentication of the personal identification number 
and the authentication code, access to afi data fields 35 
in the IC card becomes possible. 

As a result, It is posstole for a person, for example, 
a card acceptor, who is hot authorized to have 
access to the data field In question, will be able to 
obtain access to the data field in question. This 40 
constitute an unfair use of the IC card and a violation 
of the principle of secrecy of the IC card. Therefore, 
these problems of the prior art must be solved. 

SUMMARY OF THE INVENTION ^ 

It is an object of the present invention to provide 
an improved system for permitting access to a data 
field area in an IC card for multiple services. 

In accordance with the present invention, there is 
provided a system for permitting access to a data SO 
field area In an IC card for multiple services using an 
individual card holder identification number for each 
of a plurality of data fields or for each group of data 
fields, the system comprising: a plurality of data 
fields In the IC card; a sequence of a data field 55 
selection portion, a personal identification numb er 
authentication portion, an authentication code vali- 
dation portion, and an access right selection portion, 
input portions for inputting data field identification 
information, a personal Identification number, ac- 60 
cess qualification information, and an authentication 
code; a date field access portion and an access 
request portion; and storage portions for sorting 



information for data field control An authentication 
between the information stored in the storage 
portions and the information input through the input 
portions is carried out . 

Based on the cumulative result of a selection of a 
data field, a authentication of the personal identifica- 
tion number, a validation of the authentication code, 
and a selection of the access right, access to a data 
field area to which access is requested is permitted 
within the limit of the selected access right 

BRIEF DESCRIPTION OF THE DRAWINGS 
In the drawings, 

Fig. 1 is a perspective view of an IC card to 
which the system according to the present 
invention is applied; 

Fig. 2 shows afurtdamental combination of an 
IC card and a terminal apparatus : 

fig.3show5aprior art system for access toa 
data field area in an IC card for multiple 
services; 

Ftg. 4 is a schematic diagram of a system for 
permitting access to a data field area in an IC 
card for multiple services according to an 
embodiment of the present invention; 

Fig. 5 shows an example of combinations of 
the authentication code and the access right; 
and 

Fig. 6 Is a flow chart of the operation of the 
system of Fig. 4. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

Before describing a preferred embodiment of the 
present invention, an IC card to which the system 
according to the present Invention fe applied, a 
fundamental combination of an IC card and a 
terminal apparatus, and a prior art system for access 
to a data field area in an IC card for multiple services 
wifl be explained with reference to Figs. 1,2, and 3. 

As shown In Fig. 1. an IC card has contacts 
adapted for electrical connection with external 
apparatuses, an integrated circuit module beneath 
the area containing the contact electrodes, and an 
area to be embossed. As shown m Fig. 2, the circuit 
of the IC card includes the contacts, a central 
processing unit (CPU), a read only memory (ROM) 
tor storing a control program, and an electrically 
erasable and programmable read only memory 
(EEPROM) or an erasable and programmable read 
only memory (EPROM) for storing data fields, Input 
information, and control information. The circuit of 
the IC card can communicate with the program 
portion In the terminal apparatus. 

As shown In Rg.3,1n the prior art, the authentica- 
tion between the input personal identification num- 
ber 101 and the stored personal identification 
number 301 is carried out in the personal Identifica- 
tion number authentication portion 201. Based on 
the coincident result of this authentication, the 
validation between the input authentication code 102 
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and the stored authentication 302 is carried out in 
the authentication code validation portion 202. and 
based on the result of this validation, the decision 
obtained from the stored information 303. 304, and 
305 for data field, identification No. 2. and No. 3 
corresponding to the data fields No. 1, No. 2 and 
No. 3 Is carried out in the date field decision portion 
203 with respect to the input data field identification 
information 103. 

Once one of the data fields No. 1, No. 2, and No. 3 
is chosen according to the decision of one of the 
data field identification No. 1. No. 2, and No. 3. 
access through the access request portion 104 is 
permitted to the chosen data field. 

A system for permitting access to a data field area 
in an IC card for multiple services according to an 
embodiment of the present invention is shown in 
Rg, 4. The system of Fig. 4 includes a data field input 
portion 11, a personal identification number input 
portion 12, an access qualification Input portion 13. 
an authentication code input portion 14, an access 
request portion 2, a data field selection portion 31, a 
personal identification number authentication por- 
tion 32, an authentication code validation portion 33, 
an access right selection portion 34, and a data field 
access portion 4. 

The system of Rg. 4 also includes a data field 
(No. 1) 61. a data field (No. 2) 62, a data field (No. 3) 
63. a memory for data field control (No. 1) 51. a 
memory for data field control (No. 2} 52, and a 
memory for data field control (No. 3) 53. The 
memories 51, 52, and 53 corresponding to the data 
fields No. 1. No. 2, and No. 3, respectively. 

For example, information for the data field identifi- 
cation No. 1. personal identffication number (No. 1). 
authentication code Nos. 11. 12, 13 ~ 1n, and 
information for the access right Nos. 11, 12, 13 1n 
are stored in the memory 51. The authentication 
code No. 11 and the information for the access right 
No. 11 comprises an access qualification No. 1. the 
authentication code No. 12, and the information for 
the access right No. 12 comprises an access 
qualification No. 2, and so on. The authentication 
code No. 1n and the information for the access right 
No. 1n comprises an access qualification No. n. 

Here, the information for the access right con- 
cerns which one of the processes of reacting, 
writing, deleting, and re-writing should be permitted. 

In the data field selection portion 31, a comparison 
between the input data field identification 1 1 and the 
data field identification stored in the memories 51, 
52. and 53 is carried out, so that one of the data field 
Nos. 1. 2. and 3 is selected according to the 
coincident result of that comparison. 

In the persona) ic^ntmcation, authentication por- 
tion 32, after the above-mentioned selection of the 
data field, the authentication between the input 
personal identification number and the personal 
identification number- stored in the memory corre- 
sponding to the selected data field is carried out so 
that it can be confirmed whether or not the person 
inputting the personal identification number is the 
person authorized to use the data field In question 

In the authentication code validation portion 33. 
alter an affirmative confirmation of the personal 



identffication, a validation concerning the input 
authentication code and the authentication code 
stored in the memory corresponding to the selected 
data field and the input access qualification is carried 
5 out so that it can be confirmed whether or not the 
access executor has the proper authentication 
code. 

In the access right selection portion 34. after an 
affirmative confirmation of the authentication code, 

10 an extraction of the access right information stored 
in the memory corresponding to the selected data 
field and Input access qualification information is 
carried out so that the access right permitted to the 
access executor is selected. 

is In the data field access portion 4, after the 
selection of the access right, the access to the 
selected data field is carried out corresponding to 
the permitted access right in response to the input 
access request through the access request portion 

20 Z ' 

An example of the combinations of the authentica- 
tion codes and the access rights Is shown in Rg. 5. 

The operation of the system of Rg. 4 will be 
described below with reference to the flow chart of 

25 Rg. 6. 

Upon input of an access start request, a data field 
identification, a persona) identification number, ac- 
cess qualification information, and an authentication 
code, the data field Identifications stored in the 

30 memory are searched and the data field correspond- 
ing to the input data field identification is selected 
(step S1 J. When there is no corresponding data field, 
the process proceeds to the error indication. 
When the data field in question is selected, the 

36 process proceeds to step S2, where the personal 
selected data field is authenticated with regard to 
the input personal Identification number. When the 
stored personal identification number does not 
coincide with the input personal identification num- 

40 ber, the process proceeds to the error indication. 

When the stored personal identification number 
coincides with the input personal identification 
number, the process proceeds to step S4 where the 
authentication code corresponding to the input 

45 access qualification information Is derived, and the 
validation concerning the derived authentication 
code and the input authentication code is carried 
out. When the derived authentication code does not 
coincide with the input authentication code, the 

SO process proceeds to the error indication. 

When the derived authentication code coincides 
with the input authentication code, the process 
proceeds to step S6, where the access right 
corresponding to the input access qualification 

55 "information is derived from the memory for data field 
control and the decision for access right is made. 

Then, In step S7, the request for access to data in 
the selected data field is executed within the range 
of the above-described access right. 

60 



Claims 

65 1. A system for permitting access to a data 
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field area in an IC card for multiple services 
using an Individual card holder identification 
number for each of a plurality of data fields or 
for each groups of data fields, said system 
comprising: 5 
a plurality of data fields in the IC card ; 
a sequence of data field selection means, a 
persona) identification number authentication 
means, an authentication code validation 
means, and an access right selection means ; 10 
an input means for inputting data field identifica- 
tion information, a personal identification num- 
ber, access qualification information, and an 
authentication code; 

a data field access means and access request 15 
means; and 

storage means for storing information for data 
field control; 

comparisons between the information stored in 
said storage means and the information input 20 
through said input means being carried out, for 
authentication, validation, and selection; and 
based on the cumulative result of a selection of 
a data field, an authentication of a personal 
identification number, a validation of an authen- 25 
tication code, and a selection of an access 
right, access to a data field area to which 
access is requested is permitted within a limit of 
the selected access right. 

Z A system according to claim 1 wherein 30 
each memory for data field control stores data 
field Identification information, a personal ident- 
ification number, a plurality of authentication 
codes, and a plurality of access rights informa- 
tion. 35 

3. A system according to claim 1, wherein the 
access qualification information input by said 
input means is an information for selecting an 
authentication code and an access right 

4. A system according to claim 1, wherein the 40 
access right information stored in the memories 

for data field control selected by the access 
qualification information is represented by one 
of the processes of reading, writing, deleting, 
and re-writing. 45 

5. A system according to claim 1, wherein 
said personal identification number authentica- 
tion means is operated based on signals from 
the data field selection means, the personal 
identification number input means, and the 50 
memories for data field control 

6. A system according to claim 1, wherein 
said authentication code validation means is 
operated based on signals from the personal 
identification number authentication means, the 55 
access qualification input means, the authenti- 
cation code input means, and the memories for 
data field co ntro l. 

7. A system according to claim 1. wherein 

said access right selection means is operated 60 
based on signals from the authentication code 
validation means, the access qualification input 
means, and the memories for data field control. 
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Fig. 3 A 



Fig. 3 
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Fig. 3 B 
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Fig. 4 A 



Fig. 4 
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Fig.4B 
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Fig. 6B 
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